Prevent unauthorised Firmware updates using USB DFU

[jijomathew]

Title edited to be more descriptive than just "USB"

---

HI,

I Need help, My application Requires  Firmware updates using USB DFU Mode, and planning to make a custom Pc software that updates code using USB. How can I Make sure that only my Pc software should have access to connect the STM 32 using USB and update the code , How i can implement this security feature in My application? Does the USB library provide any authentication techniques So that I can integrate it for My custom application?

Thanks and Regards 

JIJO 

[TDK]

Newer STM32 chips (i.e. STM32N6) have more advanced and complicated security settings like this. I would suggest reading up on those and determining if those are sufficient. Also read up on SBSFU to see if that is acceptable.

X-CUBE-SBSFU - Secure boot & secure firmware update software expansion for STM32Cube - STMicroelectronics

In general, if someone wants to change the firmware on a chip, you are not going to be able to fully prevent it. Consider the case where the chip is physically replaced.